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CLAIMS: 



^- ^ system (100) comprising a plurality of intercomiected devices (101-105) 

and being arranged to provide the devices (101-105) conditional access to protected content 
items, characterized in that the system (100) is arranged to restrict the number of 
simultaneous sessions involving said protected content items to a predetermined total limit. 

2. The system (100) of claim 1, being arranged to restrict the number of content 

items that can be accessed simultaneously to the piedeteraiined limit 

^- system (100) of claim 2, comprising at least one security module (300) for 

providing the devices (101-105) the conditional access and being arranged to restrict the 
number of content items that can be accessed simultaneously to the predetermined limit. 

4. The system (1 00) of claim 3, in which a new security module that is to be 
added to the system must authenticate itself to the system, during which authentication the 
new security module is arranged to report the number of simultaneous accesses to content it 
is arranged to provide. 

5. The system (1 00) of claim 4, being arranged to refuse to authenticate the new 
security module if the reported number exceeds a predetermined individual limit. 

^ system (1 00) of claim 4, being arranged to indicate to the new security 

module a maximum number of simultaneous accesses it may provide simultaneously if flie 
reported number exceeds a predetermined individual limit. 

^- system (1 00) of claim 4, being arranged to authenticate the new security 

module only if a suflFicient period of time has elapsed since the last time the new security 
module was added to tfie system. 
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8. The system (1 00) of claim 3, comprising a plurality of security modules, each 

security module being arranged to restrict the number of content items to which it provides 
access simultaneously to an individual limit, the system being arranged to restrict the sum of 
the individual limits to the predetermined total limit. 

^' The system (100) of claim 8, in which one security module of said plurality is 

arranged to increase its individual limit in response to another security module of said 
plurality decreasing its individual limit. 

10. The system (100) of claim 9, comprising a number of capacity master security 

modules and a number of capacity slave security modules, a cq)acity slave security modules 
being arranged to increase its individual limit only in response to a capacity master securi^ 
module decreasing its individual limit. 



II. The system (1 00) of claim 8, being arranged to distribute a number of session 

tokens to the plurality of security modules, said number corresponding to the predetermined 
total limit, each security module being arranged to restrict the number of content items to 
which it provides access simultaneously to the number of session tokens distributed to tiiat 
security module. 



1 2. The system (1 00) of claim 2, being arranged to restrict the number of 

simultaneous accesses to content of a first type to a first predetermined total limit, and the 
number of simultaneous accesses to content of a second type to a second predetermined total 
limit. 



The system (100) of claim 12, in which die first type comprises pay-per-view 
content and the second type comprises fi«e-to-air content 

14. The system (100) of claim 1, being arranged to restrict the number of devices 

(1 01 -105) that are active simultaneously to the predetemiined total limit 



The system (100) of any previous claim, bemg arranged to determine whether 
the predetermined total limit has been reached in a wei^ted fashion, in which sessions of 
different types are assigned different weights. 
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16. The system (100) of any previous claim, being arranged to restrict the number 
of simultaneous sessions of a first type to a first predetermined total limit and the number of 
simultaneous sessions of a second type to a second predetermined total limit. 

17. The system (100) of claim 1 6. in which the first type comprises a rendering of 
a content item and the second type comprises a recording of a content item. 

18. The system (100) of any previous claim, being ananged to refuse a session if 
allowing said session would cause the number of simultaneous sessions to exceed the 
predetermined total limit. 

19. The system (100) of any previous claim, being arranged to allow a session at a 
reduced quality level if allowing said session would cause the number of simultaneous 
sessions to exceed the predetennined total limit. 

20. The system (100) of claim 19. being ananged to reduce a quality level of ail 
simultaneous sessions. 



